Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lw47dY4ki4AfwfMNNF1giwevG_Y.cer
File: Lw47dY4ki4AfwfMNNF1giwevG_Y.cer (raw, json)
Hash identifier: sWu8SCxwE1OH9T19XZbnoFxUFqLn+3eDNTfv9rbftP0=
Subject key identifier: 2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B61A26E7F354D12AEE5F70A68B820A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49798
IP: 185.140.28.0/22
IP: 2a0c:c500::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1a:26:e7:f3:54:d1:2a:ee:5f:70:a6:8b:82:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f0e3b758e248b801fc1f30d345d608b07af1bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:2c:3a:76:27:1e:97:26:14:4a:46:1b:16:
9b:2a:d8:7a:34:6a:12:33:12:24:43:be:93:0a:ae:
3b:cc:27:70:4f:e7:e3:68:7f:a2:c3:cf:cd:93:78:
7a:60:e6:a8:20:58:e1:1f:72:e3:c7:ab:31:7e:52:
a0:f5:c6:03:79:53:f4:15:0f:25:09:01:9a:ec:cd:
99:22:6a:6e:b3:58:97:05:42:20:21:e9:14:84:5b:
56:c1:fc:2b:d6:33:02:59:c0:9b:36:9f:98:22:49:
12:9b:58:2f:69:6f:9e:e0:d5:2f:aa:61:2f:32:a7:
92:16:dc:56:18:43:d2:cb:f2:fa:bb:58:83:6e:84:
f5:f0:ef:1e:bc:07:99:56:1d:cd:7d:a4:3d:95:15:
b8:39:80:a1:52:17:44:1d:9b:4b:5c:63:22:36:73:
d2:6d:77:8b:e4:6c:b1:be:72:5f:be:e6:6a:97:c7:
1d:e4:f6:59:83:14:71:21:b5:e9:68:48:b0:52:d4:
88:84:d9:08:3e:ed:a3:e2:40:fe:3b:29:2d:7a:b7:
b9:d9:2b:86:90:f6:5f:8c:3f:90:53:f9:d0:58:73:
13:ba:73:d4:a4:9d:34:17:17:eb:6f:5e:4d:43:fe:
df:2e:7a:3e:b6:b4:3f:20:61:8c:19:96:c5:06:4f:
a7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0E:3B:75:8E:24:8B:80:1F:C1:F3:0D:34:5D:60:8B:07:AF:1B:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7ded1f-c40d-47f2-a110-8456dce59ce0/1/Lw47dY4ki4AfwfMNNF1giwevG_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.28.0/22
IPv6:
2a0c:c500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49798
Signature Algorithm: sha256WithRSAEncryption
6d:68:f1:6f:fb:bb:68:8f:49:38:37:5e:d0:45:42:9f:92:24:
1c:45:b8:cb:31:0c:1b:cf:9e:3b:7e:9b:44:1e:48:80:ce:2c:
75:f1:37:58:e3:b8:b8:c7:74:b5:eb:af:4e:80:b2:77:3f:9a:
b6:c5:47:09:8b:a4:3d:3a:e3:8b:df:b8:b8:45:fe:01:36:35:
54:ed:ae:6b:f6:f0:df:a8:2c:75:11:22:dd:c2:54:fd:6d:c2:
b4:19:36:d9:ae:6f:8a:ce:2b:e6:a7:63:bd:c2:04:80:75:ea:
aa:b1:ca:e7:e6:27:86:40:52:c7:75:6f:76:70:fa:3a:79:b3:
91:23:2f:93:90:b4:59:97:f7:ac:47:8f:d9:d8:98:f1:80:25:
4a:92:c5:28:18:60:25:fb:93:58:8a:72:9e:11:93:62:08:66:
c7:2d:a5:ed:07:7b:0a:19:79:cd:23:54:c9:b8:2d:54:92:ec:
19:12:e9:0b:b3:68:10:95:e1:2a:fc:ab:07:94:84:fc:74:d2:
29:57:64:79:98:b4:c7:3c:a2:81:5c:fc:47:59:23:1f:97:59:
db:74:e8:b1:26:48:63:17:8b:db:ff:e1:1b:3d:8c:1a:e3:10:
b3:58:cb:7b:7b:a0:25:d7:81:3a:b8:ce:d3:8e:9f:2c:55:be:
7d:b8:0c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:55 2025 by rpki-client